USBPcap: User Account Control window pops up when live capture is started

asked 2018-07-05 19:23:51 +0000

kirankumarg.81 gravatar image

I am using Wireshark-2.0.3 and USBPcap version 1.2.0.3 on Windows 7 64 bit machine. When Wireshark is started it lists out all the USB ports successfully. But, when tried to start live capture on one of the USB it pops out window "User Account Control" - Image is attached. Would like to know what is the reason that it pops out this window always, is there any way it can be controlled not to pop out always.

I am running Wireshark with my user id which has admin privileges.

Please let me if any other information is required.

Thank you.

edit retag flag offensive close merge delete

Comments

You are running quite an old version of Wireshark. Have you tried to upgrade to a newer version (currently released is 2.6.1) with the accompanying USB drivers? This issue seems to stem from a configuration issue with USBPcap itself, and a newer version might have that fixed.

rknall gravatar imagerknall ( 2018-07-06 11:15:38 +0000 )edit

I just tried installing Wireshark-2.6.1 and observed same behavior. Does USBPcapCMD.exe need to be run every time USB live capture is initiated ? Is this a known/default behavior ?

kirankumarg.81 gravatar imagekirankumarg.81 ( 2018-07-06 14:36:02 +0000 )edit

Does executing Wireshark to capture USB packets using USBPcap requires admin rights/privileges ?

kirankumarg.81 gravatar imagekirankumarg.81 ( 2018-08-07 17:19:07 +0000 )edit

Yes, the admin privileges are required for USB packet capture using USBPcap. This is basic security precaution to prevent malicious software silently sniffing the USB keyboards while USBPcap is installed.

desowin gravatar imagedesowin ( 2019-04-09 15:51:23 +0000 )edit
add a comment